13061 Commits

Author SHA1 Message Date
Hans Dedecker
c1413be493 CC: dropbear: Make utmp and putuline support configurable via seperate config options
Utmp support tracks who is currenlty logged in by logging info to the file /var/run/utmp (supported by busybox)
Putuline support will use the utmp structure to write to the utmp file

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-08-31 08:50:09 +02:00
Hans Dedecker
1b3b93e5da CC: dropbear: Add procd interface triggers when interface config is specified
A dropbear instance having an interface config won't start if the interface is down as no
IP address is available.
Adding interface triggers for each configured interface executing the dropbear reload script
will start the dropbear instance when the interface is up.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-08-31 08:49:25 +02:00
Jo-Philipp Wich
7966cf2265 dropbear: honor CONFIG_TARGET_INIT_PATH
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
2017-08-31 08:48:55 +02:00
Hannu Nyman
d6cc49c97f CC: dropbear: update version to 2015.71
Update dropbear to version 2015.71, released on 3 Dec 2015.
Refresh patches.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2017-08-31 08:47:30 +02:00
Felix Fietkau
db41bcac69 dropbear: enable curve25519 support by default, increases compressed binary size by ~5 kb
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
2017-08-31 08:46:43 +02:00
Felix Fietkau
3e107d670c CC: dropbear: split out curve25519 support into a separate config option
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
2017-08-31 08:46:10 +02:00
Alexandru Ardelean
cb8e4a76ba CC: dropbear: add respawn param in case dropbear crashes
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-31 08:45:39 +02:00
Steven Barth
180384c0a6 CC: dropbear: remove generation and configuration of DSS keys
Signed-off-by: Steven Barth <steven@midlink.org>
2017-08-31 08:44:40 +02:00
Felix Fietkau
9f83a0114e dropbear: disable 3des, cbc mode, dss support, saves about 5k gzipped
While technically required by the RFC, they are usually completely
unused (DSA), or have security issues (3DES, CBC)

Signed-off-by: Felix Fietkau <nbd@openwrt.org>
2017-08-31 08:43:58 +02:00
Steven Barth
bff2da1713 CC: dropbear: Disable telnet in favor of passwordless SSH
This enables passworldless login for root via SSH whenever no root
password is set (e.g. after reset, flashing without keeping config
or in failsafe) and removes telnet support alltogether.

Signed-off-by: Steven Barth <steven@midlink.org>
2017-08-31 08:43:09 +02:00
Steven Barth
12a8f2a3d9 CC: dropbear: bump to 2015.68
Signed-off-by: Steven Barth <steven@midlink.org>
2017-08-31 08:42:03 +02:00
Imre Kaloz
2aefb514a4 mvebu: bugfixes for rango
backport of ce116bc6f997d8d6e6b976cacce5d4c60d705fc6

Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
2016-10-18 11:43:26 +02:00
Imre Kaloz
a55319cca0 mwlwifi: install the 88W8964 firmware, too
backport of 67d3ba0c7c91c0a2fb0cbd768d3a75db2246de80

Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
2016-10-16 00:15:40 +02:00
Imre Kaloz
af4877f6fd mwlwifi: upgrade to 10.3.2.0-20161013
backport of 2055b43f78c8ff74fe513a1fdaf5a10481faac6f

Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
2016-10-13 13:00:19 +02:00
Imre Kaloz
b41b40c00d hostapd: add interoperability workaround for 80+80 and 160 MHz channels
backport of f9fc9c242fa62c214dc4a92bd89ca9a36bc8308c

Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
2016-10-13 12:59:10 +02:00
Hrvoje Varga
609ebc43be odhcpd: update to git HEAD
This change also reflect relocation of upstream project which has been
moved to OpenWrt GitHub organization.

Signed-off-by: Hrvoje Varga <hrvoje.varga@sartura.hr>
2016-10-11 08:00:11 +00:00
Hrvoje Varga
901885e34c odhcp6c: update to git HEAD
This change also reflect relocation of upstream project which has been
moved to OpenWrt GitHub organization.

Signed-off-by: Hrvoje Varga <hrvoje.varga@sartura.hr>
2016-10-11 07:59:49 +00:00
Zoltan Herpai
ca3f1a614a Merge pull request #105 from wigyori/chaos_calmer
CC: openssl security upgrade, sync updates from git.openwrt.org/chaos_calmer
2016-09-29 15:49:20 +02:00
Rafał Miłecki
f9755e2877 mac80211: brcmfmac: backport changes from 2016-09-27
This fixes memory leaks, some possible crashes and bug that could cause
WARNING on every add_key/del_key call. It also replaces WARNING with
a simple message. They may still occur e.g. on station going out of
range and A-MPDU stall in the firmware.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2016-09-29 14:59:38 +02:00
Rafał Miłecki
bc00413221 mac80211: brcmfmac: backport patches that were skipped previously #2
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2016-09-29 14:58:53 +02:00
Rafał Miłecki
396e838bd6 mac80211: brcmfmac: backport patches that were skipped previously #1
They are necessary for further fixes and improvements otherwise recent
patches don't apply.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2016-09-29 14:26:20 +02:00
Imre Kaloz
1016f38a86 mwlwifi: upgrade to 10.3.0.18-20160804
adds support for the Linksys WRT1900ACSv2 and WRT1200ACv2

Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
2016-09-29 14:24:56 +02:00
Rafał Miłecki
3bf4b214e8 mac80211: brcmfmac: backport patch simplifying brcmf_alloc_vif
This is quite trivial and will be required for VIF fixes in the future.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2016-09-29 14:24:14 +02:00
Rafał Miłecki
99ed5200c0 mac80211: brcmfmac: fix stopping netdev queue when bus clogs up
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2016-09-29 14:23:54 +02:00
Rafał Miłecki
718c539199 mac80211: brcmfmac: support hidden SSID
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2016-09-29 14:23:32 +02:00
Rafał Miłecki
b0c59f5629 mac80211: brcmfmac: fix interfaces management
To work correctly hostapd requires wireless driver to allow interfaces
removal. It was working with brcmfmac only partially. Firmware for
BCM43602 got some special hack (feature?) that allowed removing all
interfaces by disabling mbss mode. It wasn't working with BCM4366
firmware and remaining interfaces were preventing hostapd from starting
again.

Those patches add support for "interface_remove" firmware method which
works with BCM4366 firmware and they make it finally possible to use
BCM4366 & brcmfmac & multiple interfaces.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2016-09-29 14:21:52 +02:00
Rafał Miłecki
067545b374 rpcd: iwinfo plugin fixes
- Expose supported HT rate information in info call
 - Zero out ccode buffer when listing countries

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2016-09-29 14:20:27 +02:00
Rafał Miłecki
a047169f9d mac80211: brcmfmac: fix lockup related to P2P interface
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>
2016-09-29 14:19:44 +02:00
Zoltan HERPAI
29fcc94c9a CC: openssl: update to 1.0.2j
Security fixes:
* (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
* (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305)
* (Severity: Moderate) Missing CRL sanity check (CVE-2016-7052)
* 10 Low severity issues

Security advisories:
https://www.openssl.org/news/secadv/20160922.txt
https://www.openssl.org/news/secadv/20160926.txt

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2016-09-29 07:29:15 +02:00
Sven Eckelmann
b6c8710aa7 package/uboot-envtools: add OpenMesh MR1750v2 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
2016-09-21 18:16:54 +02:00
Sven Eckelmann
9f2256a4d4 package/om-watchdog: add OpenMesh MR1750v2 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
2016-09-21 18:16:54 +02:00
Sven Eckelmann
eeaa319a63 package/uboot-envtools: add OpenMesh OM2P-HSv3 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
2016-09-21 18:16:54 +02:00
Sven Eckelmann
d461f84d6e package/om-watchdog: add OpenMesh OM2P-HSv3 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>
2016-09-21 18:16:54 +02:00
Sven Eckelmann
919ececba8 uboot-envtools: add OpenMesh OM5P-ACv2 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>

Backport of r49153
2016-09-21 18:16:54 +02:00
Sven Eckelmann
734f67a174 om-watchdog: add OpenMesh OM5P-ACv2 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>

Backport of r49152
2016-09-21 18:16:54 +02:00
Sven Eckelmann
1104930079 uboot-envtools: add OpenMesh OM5P-AC support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>

Backport of r49146
2016-09-21 18:16:54 +02:00
Sven Eckelmann
9ea881a3cd om-watchdog: add OpenMesh OM5P-AC support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>

Backport of r49145
2016-09-21 18:16:54 +02:00
Sven Eckelmann
84c90a1e82 package/uboot-envtools: add OpenMesh MR1750 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>

Backport of r46931
2016-09-21 18:16:54 +02:00
Sven Eckelmann
55f8c0d590 package/om-watchdog: add OpenMesh MR1750 support
Signed-off-by: Sven Eckelmann <sven.eckelmann@open-mesh.com>

Backport of r46930
2016-09-21 18:16:54 +02:00
Rafał Miłecki
cb4f0719a5 iw: backport support for "channels" command
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49388

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49389 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
468fe950b8 mac80211: brcmfmac: fix support for BCM4366
1) Fix setting AP channel
2) Improve BSS management to avoid:
[ 3602.929199] brcmfmac: brcmf_ap_add_vif: timeout occurred

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49383

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49386 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
0e29de61f7 mac80211: brcmfmac: add support for get_channel
It's very useful for debugging problems with brcmfmac setting requested
channel.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49382

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49385 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
c0c62bad73 mac80211: brcmfmac: fix support for up to 4 AP interfaces
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49381

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49384 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
97f9267796 mac80211: brcmfmac: return -ENFILE if interface exists
This makes brcmfmac compatible with mac80211 which uses dev_alloc_name
(and so returns -ENFILE on error).

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49378 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Luka Perkov
1b9467f15f openssl: Update to version 1.0.2h
openssl: Update to version 1.0.2h

Bump to the latest version, fixes several security issues:
 * CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176
More details at https://www.openssl.org/news/openssl-1.0.2-notes.html

Signed-off-by: Mohammed Berdai <mohammed.berdai@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49363 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
c9b3099b32 mtd: seama: exit with error if Seama header wasn't found
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49314

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49315 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
1508cf8713 mtd: seama: fix image data handling
1) Put sanity checks in one place
2) Respect provided offset
3) Read only as much data as needed for MD5 calculation

Thanks to the last change this is a great speedup and memory saver. On
devices with NAND flash we were allocating & reading about 128 MiB while
something about 8 MiB is enough.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49309

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49313 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
f9e8c4c3cc mtd: seama: move buf allocation to the MD5 function
This buf is only used in this function now, so lets move it there.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49308

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49312 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
79bd6bc9fb mtd: seama: update MD5 using header in the first block buffer
This will allow separating first block buffer from a buffer used for MD5
calculation.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49307

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49311 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Rafał Miłecki
8ae10b6d32 mtd: seama: add md5 to header struct
This allows us to drop some extra offset calculations and simplifies
code a bit.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49306

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49310 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00